No negative option enrollment where inaction = charges

Negative option enrollment — where inaction, a pre-selected default, or a bundled account-creation agreement triggers a subscription — is the original target of the FTC Negative Option Rule and California ARL. A pre-checked 'Add Pro subscription' checkbox is an opt-out mechanism masquerading as user consent. A free trial that silently converts to paid using a payment method from a prior unrelated transaction is the most-complained-about pattern in the FTC's negative option enforcement history. Both patterns are documented in the FTC Dark Patterns Report (2022) as straightforward violations.

Audit every form in the enrollment flow for pre-selected subscription elements. Replace any defaultChecked subscription checkbox with an explicit unchecked default:

{/* BEFORE — negative option: pre-checked */}
{/* <input type="checkbox" name="addSubscription" defaultChecked /> */}

{/* AFTER — requires explicit opt-in */}
<label className="subscription-addon">
  <input
    type="checkbox"
    name="addSubscription"
    defaultChecked={false}
  />
  <span>Add Pro subscription — <strong>$29/month</strong>, cancel anytime.</span>
</label>

For free-to-paid trial flows in app/api/checkout/route.ts, collect payment information at trial signup to make intent explicit. Do not convert a free account to paid using a payment method sourced from a prior unrelated transaction — that requires fresh payment authorization.